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(U) 


PROCEDURES USED BY THE NATIONAL SECURPJ^ HiC^WcY'l'OR^ 


TARGETING NON-UNITED STATES PERSONS REASONABLY. BELIEVED T&&E 
LOCATED OUTSIDE THE UNITED STATES TO ACQfcjfecQRElG^ 11 
INTELLIGENCE INFORMATION PURSUANT TO SECTION 70z'OT’ THE FOREIGN 
INTELLIGENCE SURVEILLANCE ACT OF 1978, AS AMENDED 


(U) These procedures address: (I) the manner in which the National Security Agency/Central 
Security Service (NSA) will determine that a person targeted under section 702 of the Foreign 
Intelligence Surveillance Act of 1978, as amended (FISA or "the Act"), is a non-United States 
person reasonably believed to be located outside the United States ("foreignness determination"); 

(II) the post-targeting analysis done by NSA to ensure that the targeting of such person does not 
intentionally target a person known at the time of acquisition to be located in the United States 
and does not result in the intentional acquisition of any communication as to which the sender 
and all intended recipients are known at the time of acquisition to be located in the United States; 

(III) the documentation of NSA’s foreignness determination; (IV) compliance and oversight; and 

(V) departures from these procedures. For the purposes of these procedures, the terms "National 
Security Agency" and "NSA personnel" refer to any employees of NSA and any other personnel 
engaged in Signals Intelligence (SIGINT) operations authorized pursuant to section 702 of the 
Act if such operations are executed under the direction, authority, or control of the Director, 
NSA/Chief, Central Security Service (DIRNSA). 


I. (U) DETERMINATION OF WHETHER THE ACQUISITION TARGETS NON- 
UNITED STATES PERSONS REASONABLY BELIEVED TO BE LOCATED OUTSIDE 
THE UNITED STATES 


(U) NSA determines whether a person is a non-United States person reasonably believed to be 
outside the United States in light of the totality of the circumstances based on the information 



INSA analysts examine the following three categories of information, 
as appropriate under the circumstances, to make the above determination: (1) they examine the 
lead information they have received regardir 
generated interest in conducting surveillanc 



o determine whether NSA 
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knows the location of the person, orloiowsinforrnationthatwouldprovideevidence concerning 
that and (3) they determine or 

verify information about the person's location. NSA may use information from any one or a 
combination of these categories of information in evaluating the totality of the circumstances to 
determine that the potential target is located outside the United States. 


(TS//SI//NF) Acquisitions conducted under these procedures will not intentionally acquire 
communications that contain a reference to, but are not to or from, a person targeted in 
accordance with these procedures. In addition, in those cases where NSA uses "upstream" 
collection techniques 
with these procedure 




(U) Lead Information 


When NSA proposes to direct surveillance at a target, it does so 
because NSA has already learned something about the target or the facility or facilities the target 
uses to communicate. Accordingly, NSA will examine the lead information to determine what it 


g are examples of the types of lead information that NSA may examine: 




b) 

c) 


1 (T9//BI//NF) Fo r purposes of these procedures, an "Internet transaction" is an Internet communication acquired 
through NSA’s upstream collection techmaue^h^nav contain information or data representing either a discrete 
communication (e.g., an e-mail.limllii I ill I 


of Internet transactions to or from a person targeted in 
accordance with these procedures are permitted regardless of whether the transaction contains information or data 
representing either a discrete communication or multiple discrete communications. Acquisitions of Internet 
transactions that are not to or from a person targeted in accordance with these procedures are not permitted, 
regardless of whether the transaction contains a discrete communication to or from a person targeted in accordance 
with these procedures. 
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d) 

e) 


(U) Information NSA Has About the Target's Location and/or Facility or Facilities Used by 
the Target 


(S//NF) NSA may also review information in its data bases, including repositories of informatio n 
collected by NSA and by other intelligence agencies, 

determine if the person's location, or information providing evidence about the person’s location, 
is already known. The NSA databases that would be used for this purpose contain information 


culled from signals intelligence, human intelligence, law enforcement information, and other 


sources. For example, 




to assist it in making determinations concerning the 


location of the person at whom NSA intends to direct surveillance. For example, NSA may 


examine the. following types of information: 
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(U) Assessment of the Non-United States Person Status of the Target 


(S//NF) In many cases, the information that NS A examines in order to determine whether a 
target is reasonably believed to be located outside the Unite^State^na^ls^bea^rpot^h^ion 
United States person status of that target. For 

m^Hsimilarly, information contained in NSA databases, including repositories of 
information collected by NSA or other agencies, may indicate that the target is a non-United 
States person. 



(U) Assessment of the Foreign Intelligence Purpose of the Targeting 


(U) NSA must also reasonably assess, based on the totality of the circumstances, that the target is 
expected to possess, receive, and/or is likely to communicate foreign intelligence information 
concerning a foreign power or foreign territory authorized for targeting under a certification or 
authorization executed by the Director of National Intelligence and the Attorney General in the 
manner prescribed by section 702. This assessment must be particularized and fact-based, 
informed by analytic judgment, the specialized training and experience of the analyst, as well as 
the nature of the foreign intelligence information expected to be obtained. In making this 
assessment NSA will consider the circumstances that led to NSA's identification of the intended 
target and other relevant factors which could include, among other things, the following: 


a. (S//NF) With respect to telephone communications: 
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II. (U) POST-TARGETING ANALYSIS BY NSA 

(U) After a person has been targeted for acquisition by NSA, NSA will conduct post-targeting 
analysis. Such analysis is designed to detect those occasions when a person who when targeted 
was reasonably believed to be located outside the United States is located in the United States, 
and will enable NSA to take steps to prevent the intentional acquisition of any communication as 
to which the sender and all intended recipients are known at the time of acquisition to be located 
in the United States, or the intentional targeting of a person who is inside the United States. 

Such analysis may include: 
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• N1SA analysts may analyze content tor indications that a target Has entered or intends to 
enter the United States. Such content analysis will be conducted according to analytic 
and intelligence requirements and priorities. 3 
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(S//NF) If NS A determines that a target has entered the United States, it will follow the 



(U) NS A analysts will also analyze content for indications that a target is a United States 
person. 4 Such content analysis will be conducted according to analytic and intelligence 
requirements and priorities. If NS A determines that a target who at the time of targeting was 
believed to be a non-United States person is believed to be a United States person, it will follow 
the procedures set forth in section IV of this document, including the termination of the 
acquisition from the target without delay. 


III. (U) DOCUMENTATION 


(U) Analysts who request tasking will document in the tasking database a citation or citations to 
the information that led them to reasonably believe that a targeted person is located outside the 
United States. Before tasking is approved, the database entry for that tasking will be reviewed in 
order to verify that the database entry contains the necessary citations. 

(S//NF) A citation is a reference that identifies the source of the information, such as a report 
number or communications intercept identifier, which NSA will maintain. The citation will 
enable those responsible for conducting oversight to locate and review the information that led 
NSA analysts to conclude that a target is reasonably believed to be located outside the United 
States. 


(U) Analysts also will identify the authorized foreign power or foreign territory about which they 
expect to obtain foreign intelligence information pursuant to the proposed targeting, and will 
provide a written explanation of the basis for their assessment, at the time of targeting, that the 
target possesses, is expected to receive, and/or is likely to communicate foreign intelligence 
information concerning that authorized foreign power or foreign territory. 
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IV. (U) OVERSIGHT AND COMPLIANCE 

(U) NS A will conduct compliance and oversight activities, on an ongoing basis, with respect to 
its exercise of the authority under section 702 of the Act, including the associated targeting, 
minimization, and querying procedures adopted in accordance with section 702. NSA will 
develop and deliver training regarding the applicable procedures to ensure NSA personnel 
responsible for approving the targeting of persons under these procedures, as well as NSA 
personnel with access to the acquired foreign intelligence information understand their 
responsibilities and the procedures that apply to this acquisition. NSA has established processes 
for ensuring that raw traffic is labeled and stored only in authorized repositories, and is 
accessible only to those who have had the proper training. NSA will conduct ongoing oversight 
activities and will make any necessary reports, including those relating to incidents of 
noncompliance, to the NSA Inspector General and OGC, in accordance with its NSA 
charter. NSA will also ensure that necessary corrective actions are taken to address any 
identified deficiencies. To that end, NSA will conduct periodic spot checks of targeting decisions 
and intelligence disseminations to ensure compliance with established procedures, and conduct 
periodic spot checks of queries in data repositories. 

(U) The Department of Justice (DOJ) and the Office of the Director of National Intelligence 
(ODNI) will conduct oversight of NSA's exercise of the authority under section 702 of the Act, 
which will include periodic reviews by DOJ and ODNI personnel to evaluate the implementation 
of the procedures. Such reviews will occur approximately once every two months. 

(U) NSA will report to DOJ, to the ODNI Office of General Counsel, and to the ODNI Civil 
Liberties Protection Officer any incidents of noncompliance with these procedures by NSA 
personnel that result in the intentional targeting of a person reasonably believed to be located in 
the United States, the intentional targeting of a United States person, or the intentional 
acquisition of any communication in which the sender and all intended recipients are known at 
the time of acquisition to be located within the United States. NSA will provide such reports 
within five business days of learning of the incident. Any information acquired by intentionally 
targeting a United States person or a person not reasonably believed to be outside the United 
States at the time of such targeting will be purged from NSA databases. 

(U) NSA will report to DOJ through the Deputy Assistant Attorney General in the National 
Security Division with responsibility for intelligence operations and oversight, to the ODNI 
Office of General Counsel, and to the ODNI Civil Liberties Protection Officer, any incidents of 
noncompliance (including overcollection) by any electronic communication service provider to 
whom the Attorney General and Director of National Intelligence issued a directive under 
section 702. Such report will be made within five business days after determining that the 
electronic communication service provider has not complied or does not intend to comply with a 
directive. 

(U) In the event that NSA concludes that a person is reasonably believed to be located outside 
the United States and after targeting this person learns that the person is inside the United States, 
or if NSA concludes that a person who at the time of targeting was believed to be a non-United 
States person is believed to be a United States person, it will take the following steps: 
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1) Te rmin ate the acquisition without delay from all facilities tasked in accordance with 
these procedures and used by that target, and detennine whether to obtain 
authorization under another section of the Act. If NSA inadvertently acquires a 
communication sent to or from the target while the target is or was located inside the 
United States, including any communication where the sender and all intended 
recipients are reasonably believed to be located inside the United States at the time of 
acquisition, such communication will be treated in accordance with the applicable 
minimization and querying procedures. 

2) Report the incident to DOJ through the Deputy Assistant Attorney General in the 
National Security Division with responsibility for intelligence operations and 
oversight, to the ODNI Office of General Counsel, and to the ODNI Civil Liberties 
Protection Officer within five business days. 


V. (U) DEPARTURE FROM PROCEDURES 

(U) If, in order to protect against an immediate threat to the national security, NSA determines 
that it must take action, on a temporary basis, in apparent departure from these procedures and 
that it is not feasible to obtain a timely modification of these procedures from the Attorney 
General and Director of National Intelligence, NSA may take such action and will report that 
activity promptly to DOJ through the Deputy Assistant Attorney General in the National Security 
Division with responsibility for intelligence operations and oversight, to the ODNI Office of 
General Counsel, and to the ODNI Civil Liberties Protection Officer. Under such circumstances, 
the Government will continue to adhere to all of the statutory limitations set forth in subsection 
702(b) of the Act. 
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